Struct TargetPolicy 

pub struct TargetPolicy {
    pub allowed: Vec<String>,
    pub denied: Vec<String>,
    pub block_private: bool,
}

Operator-defined domain allow/deny list applied to every outbound target (extract URLs and each redirect hop). denied wins over allowed; an empty allowed list permits any host. Matching is case-insensitive and covers subdomains (e.g. example.com matches www.example.com).

Fields

allowed: Vec<String>

Domains always allowed; empty permits any host.

denied: Vec<String>

Domains always denied; denied wins over allowed.

block_private: bool

Refuse private/loopback/link-local destinations (SSRF guard). false is for intranet operators only; default true.

Implementations

impl TargetPolicy

pub fn from_security(sec: &SecurityConfig) -> Self

Build from the operator’s security configuration section. These lists were previously dead config; they are now enforced.

pub fn domain_allowed(&self, host: &str) -> bool

Whether an outbound target host passes the allow/deny policy.

Trait Implementations

impl Clone for TargetPolicy

fn clone(&self) -> TargetPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TargetPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TargetPolicy

fn default() -> Self

Returns the “default value” for a type.